Lucene search

[email protected]CVE-2004-1779

HistoryMay 10, 2005 - 4:00 a.m.

CVE-2004-1779

2005-05-1004:00:00

[email protected]

web.nvd.nist.gov

cve-2004-1779

cross-site scripting

xss

thwboard

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.2%

JSON

Cross-site scripting (XSS) vulnerability in board.php for ThWboard before beta 2.84 allows remote attackers to inject arbitrary web script or HTML via the lastvisited parameter.

Affected configurations

NVD

Node

thwboardthwboard_betaMatch2.8

thwboardthwboard_betaMatch2.81

thwboardthwboard_betaMatch2.82

thwboardthwboard_betaMatch2.83

CPENameOperatorVersion
thwboard:thwboard_betathwboard thwboard betaeq2.8
thwboard:thwboard_betathwboard thwboard betaeq2.81
thwboard:thwboard_betathwboard thwboard betaeq2.82
thwboard:thwboard_betathwboard thwboard betaeq2.83

CPE	Name	Operator	Version
thwboard:thwboard_beta	thwboard thwboard beta	eq	2.8
thwboard:thwboard_beta	thwboard thwboard beta	eq	2.81
thwboard:thwboard_beta	thwboard thwboard beta	eq	2.82
thwboard:thwboard_beta	thwboard thwboard beta	eq	2.83

References

cvs.sourceforge.net/viewcvs.py/thwb/thwb/board.php?r1=1.11&r2=1.12

secunia.com/advisories/10546

securitytracker.com/id?1008617

sourceforge.net/project/shownotes.php?release_id=207893

www.osvdb.org/3330

www.securityfocus.com/bid/9367

exchange.xforce.ibmcloud.com/vulnerabilities/14143

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.2%

JSON

Related for CVE-2004-1779

cvelist1 nvd1